Our Purpose
Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart, and accessible. Our technology, innovation, partnerships, and networks combine to deliver a unique set of products and services that help people, businesses, and governments realize their greatest potential.
Title and Summary
Business Security Officer, Vocalink Limited Overview
Vocalink Limited, a Mastercard Company, is seeking a Business Security Officer to oversee Vocalink’s information, cyber, and technology security. This role offers an exciting opportunity to lead a team responsible for delivering security for Critical National Infrastructure to key customers in the United Kingdom.
The services provided to our UK customers account for 90% of salaries paid, nearly all benefit payments, all cheque clearances, and the majority of ATM transactions. This is a rare opportunity to join a high-performing team dedicated to ensuring these services remain robust, secure, and seamless for over 60 million citizens daily—amounting to 11 billion transactions annually valued at over £10 trillion.
The Vocalink Business Security Officer (BSO) is a senior management role, reporting to the Vocalink Limited CEO and the Mastercard Chief Security Officer.
Vocalink is confident that its security work streams are executed effectively with proper governance and communication, ensuring security initiatives align with business needs and regulatory requirements. The role’s communications and outcomes will also serve as evidence for audits and demonstrate cyber resilience capabilities as defined by regulators.
All candidates must undergo the non-objection process with the Bank of England before assuming the role.
Responsibilities
* Develop, implement, and enforce security policies to protect critical data and infrastructure.
* Provide strategic guidance on Vocalink’s cybersecurity program and ensure compliance with security standards, policies, regulations, and legislation.
* Oversee daily technical activities of the security team, including Security Operations, Incident Response, Governance, Risk & Compliance, Vulnerability Management, Physical Security, and Business Continuity Planning.
* Communicate security risks and threats to senior executives, boards, regulators, and government, presenting solutions and actionable insights backed by data.
* Ensure UK Core Services meet or exceed contractual and regulatory obligations.
* Promote a strong security culture and facilitate organizational security awareness.
* Oversee Vocalink’s cyber controls framework.
* Manage the security budget effectively, making informed investment decisions.
* Lead and manage outcomes within a matrixed organization.
* Champion corporate values through robust processes and practices.
* Maintain Vocalink’s and Mastercard’s security profile through external relationships, presentations, and media engagement.
* Operate within the 3LoD risk management framework, managing risks and controls.
* Provide strong leadership to a security team of approximately 60 FTEs.
Knowledge, Skills, and Experience
* Extensive experience working at the executive level in global financial services, including with a Board of Directors.
* Experience in complex, multi-national stakeholder environments, including regulator interactions.
* Deep expertise in cybersecurity and reporting standards.
* Proven ability to collaborate across functions and implement best practices in security, logging, and monitoring.
* Understanding of CPMI-IOSCO Annex F and its implications for Financial Market Infrastructure.
* Strong influencing skills and organizational savvy.
* High ethical standards and motivation.
* Strategic thinker capable of developing and communicating clear direction.
* Effective leadership, motivation, and inspiration skills.
Corporate Security Responsibility
All activities involving Mastercard assets, information, and networks carry inherent risks. Every employee must:
* Adhere to Mastercard’s security policies and practices.
* Ensure confidentiality and integrity of accessed information.
* Report suspected security violations or breaches.
* Complete mandatory security training as per Mastercard’s guidelines.
#J-18808-Ljbffr